[Corp Blog] Twitter Blue to X Phishing Breakout – Gridinsoft Blogs
Summary
- Scammers exploit Twitter’s rebranding (transition to name “X”) confusion for phishing.
- Twitter Blue users targeted, offered migration to “X,” but scammers gain account access.
- Phishing emails seem genuine, appearing to come from x.com and passing the Security Policy Framework (SPF), and include deceptive authorization link, opening a legitimate API authorization screen.
- Clicking link grants attackers control over victim’s Twitter account settings and content.
- Victims can block access by revoking app authorization in Twitter settings.
- Twitter is aware and "working on a solution."
Article's Safety Recommendations (probably a bit generic and self-promotional)1) Being cautious with unfamiliar emails, especially attachments or links. 2) Verifying URLs by hovering over them. 3) Not sharing personal info on suspicious/unknown sites. 4) Be careful with attachments and links. 5) Using two-factor authentication (2FA) for account security. 6) Keeping antivirus software updated to prevent malware.
Edited based on comment from: @incogtino
![](https://kbin.life/media/cache/resolve/entry_thumb/ff/54/ff5456ace2f849358c12da95aefe166ee23d74e0c6a9f551326ab506df22fd74.jpg)